Automated triage: Design issue
Thank you for reporting this issue. There is currently no setting to disable passkeys. Passkey login is a standard login method that does not depend on the two-step verification provider record, and that record's active flag is not an admin setting. Turning passkeys off would need a new option, which is a design change rather than a bug fix.
This is an automated assessment. A member of staff may review and update it.